FortiAnalyzer can also join a FortiAnalyzer Fabric which enables centralized viewing of devices, incidents, and events across multiple FortiAnalyzers acting as members.
The FortiAnalyzer Fabric is ideal for use in high volume environments with many FortiAnalyzers. For more information about sizing and design considerations, see the FortiAnalyzer Architecture Guide.
In this mode, FortiAnalyzer Fabric members form a Fabric with one device operating in supervisor mode as the root device. Incident, event, and log information is synced from members to the supervisor using the API.
See the FortiAnalyzer Fabric Deployment Guide for more information.